This repository has been archived by the owner. It is now read-only.

/safegem

GitHub's safe gem eval web service
  1. Ruby 100.0%
Ruby
Clone or download

Clone with HTTPS

Use Git or checkout with SVN using the web URL.

Open in Desktop Download ZIP
Find file
Switch branches/tags
Nothing to show
Latest commit 03cacb8 Feb 15, 2015 @bkeepers bkeepers Update README to reflect unmaintained status
Permalink
Failed to load latest commit information.
bin re-enable cleanup Apr 9, 2009
lib part of the two-phase gem build process now Mar 29, 2009
test cleanup and sinatra 0.9.1.1 compatibility Mar 29, 2009
.gitignore add safegem binary to gemspec and make it executable Feb 11, 2009
README Update README to reflect unmaintained status Feb 15, 2015
Rakefile oops, wrong sinatra dep version Apr 1, 2009
VERSION.yml Version bump to 0.2.10 Apr 9, 2009
safegem.gemspec Regenerated gemspec for version 0.2.10 Apr 9, 2009

README 

NOTE: This repository is no longer supported or updated by GitHub. If you wish to continue to develop this code yourself, we recommend you fork it.
SafeGem: GitHub's Safe Gem Eval Web Service
-------------------------------------------
Help make GitHub's gem build process more secure and robust!
SafeGem is a Sinatra app that safely converts Ruby gemspecs into YAML gemspecs.
It works as follows:
1) Receives a request with the repo location and the ruby gemspec
2) Returns immediately and schedules the following via EM.defer:
1) Makes a shallow clone of the repo and chdir's to that repo
2) Evals the spec in a separate thread with a higher $SAFE level
3) Converts spec to YAML
4) Posts the YAML to the specified callback
Goals
-----
* Lower the $SAFE level to allow methods like Dir.glob, but without compromising security.